Java 应用程序非常流行；为了在 VDS 服务器上运行它们，您需要安装它。 Java 安装应该在没有控制面板的裸服务器上完成。

作为虚拟服务器配置，我们建议使用带有 KVM 的 VDS，从 2 个 CPU 核心和 2 GB RAM 开始。

1.安装最新版本

apt update
apt install default-jdk

2.检查Java版本

java -version

openjdk version "17.0.8" 2023-07-18
OpenJDK Runtime Environment (build 17.0.8+7-Debian-1deb12u1)
OpenJDK 64-Bit Server VM (build 17.0.8+7-Debian-1deb12u1, mixed mode, sharing)

3. 安装 Apache Tomcat Web 服务器

apt install tomcat10 tomcat10-admin tomcat10-docs tomcat10-examples

3.1 启动tomcat服务

systemctl enable tomcat10
systemctl start tomcat10

3.2 让我们检查一下工作

默认情况下，tomcat配置为在8080端口上工作，在浏览器中打开链接。

http://ip-or-domain:8080/

It works !
...
Users are defined in /etc/tomcat10/tomcat-users.xml.

4. 如有必要，配置用户并分配角色

nano /etc/tomcat10/tomcat-users.xml

< tomcat-users xmlns="http://tomcat.apache.org/xml"
              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
              xsi:schemaLocation="http://tomcat.apache.org/xml tomcat-users.xsd"
              version="1.0">
              
< !--
Built-in Tomcat manager roles:
    - manager-gui    - allows access to the HTML GUI and the status pages
    - manager-script - allows access to the HTTP API and the status pages
    - manager-jmx    - allows access to the JMX proxy and the status pages
    - manager-status - allows access to the status pages only
-->
...
< user username="admin" password="< must-be-changed>" roles="manager-gui"/>
...
< /tomcat-users>

4.1 更改端口

如有必要，请在设置文件中指定所需的端口

nano /etc/tomcat10/server.xml

< Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />

4.2 设置证书并启用 SSL

取消注释设置文件中的选项并编辑证书的路径

nano /etc/tomcat10/server.xml

< Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true">
        < UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        < SSLHostConfig>
            < Certificate certificateKeystoreFile="domain-cert.jks"
                         type="RSA" />
        < /SSLHostConfig>
    < /Connector>
< /code>

openssl pkcs12 -export -out /tmp/cert_and_key.p12 -in cert.pem -inkey key.pem -name tomcat

keytool -importkeystore -deststorepass 'P@ssw0rd' -destkeypass 'P@ssw0rd' -destkeystore /tmp/domain-cert.jks -srckeystore /tmp/cert_and_key.p12 -srcstoretype PKCS12 -srcstorepass 'P@ssw0rd_for_key' -alias tomcat

mv /tmp/domain.jks /etc/tomcat10/domain-cert.jks

nano /etc/tomcat10/server.xml

...
certificateKeystoreFile="domain-cert.jks"
certificateKeystorePassword="P@ssw0rd"
                         type="RSA" />

systemctl restart tomcat10